aws
ssh admin@zhangmin.name -i .ssh/p7.pem
nas
ssh wangheixia@zhangmin.name -p 10022
auto ban ssh
apt install fail2ban -y
sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local# 找到与 SSH 相关的部分，并根据需要进行修改。以下是一个典型的 SSH 配置示例
[sshd]
enabled = true
port = ssh
logpath = /var/log/auth.log
maxretry = 5
bantime = -1 # 被封禁的时间，单位为秒，600秒即10分钟, -1为永久
findtime = 600 # 定义检查的时间窗口，单位为秒
[DEFAULT]
ignoreip = 127.0.0.1/8 ::1 192.168.2.0/24sudo systemctl restart fail2ban && sudo systemctl status fail2ban查看登陆的IP
# 成功登陆的ip
sudo grep 'sshd.*Accepted' /var/log/auth.log | grep -v 'sudo' | sed -E 's/.*Accepted publickey for ([^ ]+) from ([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+).*/user: \1 ip: \2/' | sort | uniq
# 登陆失败的ip
sudo grep 'sshd.*Failed password' /var/log/auth.log | grep -v 'sudo' | awk -F 'from ' '{print $2}' | awk -F ' port' '{print $1}' | sort | uniq